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ASSIGNMENT OF USER CERTIFICATES/PRIVATE KEYS IN TOKEN ENABLED 
PUBLIC KEY INFRASTRUCTURE SYSTEM 

A B S TR A CT Q F TH E DISCLOSURE 

A method and computer program to assign certificates/private keys to a token 
(130). This method and computer program allows a user (132) to access a certificate 
authority (110) and have certificates/private keys that are used for signature, encryption 
and role purposes generated and downloaded to the token (130). The use of secure 
communication lines and computers is not necessary since the token (132) contains a 
unique token ID and private key, while the certificate authority (110) contains the 
associated public key for the token (130). The certificate generated is wrapped in the 
public key and only the token (130), having the associated private key, may activate the 
certificate. 
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